News for hackers. Stuff that matters.

A comment on Glassdoor not so anonymous. Parent comment

Re:Glassdoor not so anonymous by MadsRC on Tuesday July 19, 2022 @01:42AM (#32147943)
This is a real problem, especially for InfoSec tools. Many EDR tools, such as MS Defender for Endpoint (or whatever it’s called these days) and Crowdstrike Falcon, include functionality that will scan your local network for devices in order to discover unmanaged devices…

It’s a nightmare from a privacy point, but its also a problem for the InfoSec tools… How do they distinguish between an unmanaged private device on a private network or a unmanaged device on a corporate network?

[ Parent | on HN ]
Re:Glassdoor not so anonymous by oarsinsync on Tuesday July 19, 2022 @01:53AM (#32147992)
> its also a problem for the InfoSec tools… How do they distinguish between an unmanaged private device on a private network or a unmanaged device on a corporate network?

Trivially, from the simplistic (check IPs and router MACs / SSID in use) to the marginally more advanced (deploy an agent that is only reachable from the corporate network) to determine if the tool should even be running in the first place.

[ Parent | on HN ]